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A  dynamical  model  of  behavioural  specifications 


Tomasz  Nowicki 


Abstract 

We  give  a  description  of  the  behavioral  specification  in  terms  of  infinite  sequences.  This  descrip¬ 
tion  allows  the  use  of  the  well  developped  theory  of  subshifts  of  finite  type  and  the  formulation  of 
some  invariance  properties.  Our  aim  is  to  introduce  a  new  language  in  this  area. 


0  Introduction 

In  this  report  we  introduce  a  mathematical  model  for  the  system  behaviour  paradigm.  This  behavioral 
specification  is  explained  in  [3],  where  the  motivation,  general  introduction  and  specific  examples  are 
given.  We  assume  that  this  paper  is  known  to  the  reader. 

First  we  give  the  outline  of  the  idea.  We  deal  with  a  system  being  a  (finite)  set  of  states.  We 
observe  a  state,  it  may  change  into  another  one  by  some  prescribed  rules,  this  is  the  evolution  of  the 
system. 

We  assume  the  following  :  The  system  behaviour  is  described  by  the  sequences  of  its  states.  Not 
all  the  sequences  are  possible.  The  restrictions  are  given  by  the  rules,  represented  by  tasks,  which  are 
transformations  of  the  set  of  states  into  itself. 

In  fact  this  transformations  are  parameterized  by  the  same  set  of  states  (or  :  a  task  is  a  map 
from  the  carthesian  product  of  two  copies  of  the  set  of  states  into  one  copy).  We  understand  this  in  a 
dynamical  way,  given  an  initial  state  (paprameter)  a  rule  transforms  a  given  (source)  state  into  a  new 
(target)  one.  We  say  that  a  task  starts  at  one  state,  ends  at  the  second  one  and  the  state  evolued  to 
the  result  of  the  task. 

Possible  sequences  are  those  for  which  next  element  is  an  image  of  the  previous  one  by  a  task 
started  some  time  before.  We  understand  that  the  set  of  states  and  the  set  of  tasks  are  given  and  finite 
(or  countable). 

Our  aim  is  the  understanding  and  classification  of  asymptotical  behaviour  of  the  system,  i.e.  of 
such  sequences.  The  first  step  is  to  separate  possible  behaviors  of  the  system  (possible  sequences)  into 
two  classes,  in  one  the  behaviour  is  eventually  constant  (which  may  be  called  a  dead-lock),  in  the  other 
is  not.  Of  course  this  is  very  rough,  as  for  example  periodic  behaviour  is  mixed  up  with  an  aperiodic 
one,  but  the  method  we  use  can  be  developed  in  order  to  deal  with  more  involved  problems 

Now  we  sketch  the  model.  In  the  next  section  (1)  we  give  precise  definitions.  In  section  2  we 
construct  some  interesting  invariant  sets  in  the  most  general  situation.  Section  3  follows  with  some 
more  specific  models,  next  (section4)  we  describe  our  model  in  terms  of  the  theory  of  subshifts  of  finite 
type  and  we  show  he  links  with  a  thermodynamical  formalism. 

•  In  order  to  settle  the  notion  of  the  system  we  introduce  the  set  of  possible  states  called  a  world. 
The  behaviour  of  the  system  is  a  sequence  of  states,  so  we  assume  that  the  changes  occur 
discretely  (i.e.  not  continuously).  We  shall  say  earlier  or  later  (i.e.  introducing  time)  in  the  sense 


3 


Institute  of  Informatics 


Warsaw  University 


of  the  precedence  in  such  a  sequence.  The  time  is  discrete  and  is  modeled  by  natural  (or  entire) 
numbers. 

•  Actions  are  transformations  of  the  world  into  itself.  So  we  may  say  that  an  action  changes  a 
state,  meaning  that  the  next  element  of  the  sequence  is  an  image  of  the  previous  one  under  the 
action. 

•  In  fact  we  want  the  action  to  be  a  rule  how  to  change  the  state  when  the  action  is  terminated 
given  a  state  when  it  is  initiated.  Therefore  we  may  speak  about  tasks.  A  task  is  a  function  from 
world  into  itself  parameterized  by  the  world. 

•  The  set  of  parameters  such  that  the  task  is  not  identity  on  the  world  is  called  a  preguard  of  the 
task. 

•  The  set  of  states  which  are  changed  by  some  parameters  is  called  a  postguard  of  the  task. 

•  The  notions  of  guards  appearing  in  [3]  are  defined  in  a  different  way,  but  essentially  describe  the 
same  properties. 

•  In  what  follows  we  think  of  an  action  to  be  a  task  with  a  fixed  parameter.  The  preguard  and 
the  postguard  of  an  action  are  those  of  corresponding  task. 

•  The  world  and  some  set  of  tasks  is  called  a  project.  Possible  sequences  realized  by  a  project  are 
such  that  may  be  submitted  to  some  additional  restrictions. 

•  One  of  such  restrictions  could  be  described  by  the  notion  of  the  agency  (see  section  3). 

—  Given  an  abstract  (finite)  set  A  we  assign  to  each  moment  a  collection  of  card  A  actions. 

~~  The  change  in  state  is  due  to  one  of  the  actions  (called  the  active  action  in  contrast  to  other 
pending  actions). 

The  change  in  assignment  is  due  to  two  rules.  First  we  skip  the  active  action  and  maybe 
some  actions  for  which  the  current  state  is  not  in  the  postguard.  Then  we  add  actions  such 
that  the  new  state  is  in  their  preguards. 

•  We  may  impose  some  restrictions  on  the  distribution  of  the  actions.  For  example  we  may  want 
that  an  action  persists  until  it  is  terminated  i.e.  until  there  was  an  attempt  to  implement  it  in  the 
system.  That  means  that  for  a  given  agent  an  action  assigned  to  it  at  some  moment  (initiated) 
does  not  change  in  following  moments  until  it  becomes  active  (at  some  moment  the  system  is 
changed  by  this  action  or  if  not  in  the  postguard  the  action  is  abandonned). 

•  We  may  also  want  that  any  initiated  action  terminates  (becomes  active  or  is  skipped  -  ’tried  to 
be  active  but  did  not  meet  a  postguard  condition’). 

•  Often  a  carthesian  model  is  used.  Then  the  world  is  a  carthesian  product  of  some  sets  and  the 
actions  consist  in  changing  some  coordinates  of  the  state  by  the  function  of  same  coordinates  of 
the  parameters. 

•  The  carthesian  model  is  idempotent,  by  this  we  mean  that  using  twice  one  action  consecutively 
gives  the  same  result  as  using  it  just  once. 
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•  There  is  a  natural  dynamic  in  the  set  of  sequences,  which  is  given  by  a  shift  (see  section  4).  This 
corresponds  to  the  evolution  in  time.  If  we  say  that  some  evolution  is  (time-)invariant  we  mean 
that  some  subset  of  such  a  collection  is  invariant  under  the  shift. 

•  In  the  set  of  sequences  we  may  introduce  distance  and  probability  based  on  distance  and  proba¬ 
bility  in  the  world.  Thus  we  may  speak  of  convergence,  limits  and  attractors  in  the  topological 
and  measure-theoretical  senses. 

•  For  a  finite  world  the  theory  of  such  sequences  is  called  the  theory  of  subshifts  of  finite  type.  In 
this  theory  one  may  describe  such  physical  notions  as  energy,  pressure  or  entropy. 

1  Definitions 

In  this  section  we  introduce  the  notions  which  will  be  used  in  this  report.  We  shall  use  the  following 

notation  : 

•  We  denote  by  T{AyB)  the  set  of  all  maps  from  A  to  B. 

•  For  A,  5  C  and  Z  C  .^(Wx  W,  >V)  we  denote  by  Z(A,  B)  the  set  {ty  €  W  :  ^zez,a^A,b€B  ^  = 
Z(a,6)}. 

Now  we  construct  the  system. 

•  We  shall  call  the  set  W  a  world.  Essentially  we  think  that  W  is  finite  but  large. 

•  We  call  an  element  from  T{)V  x  >V,  W)  a  task. 

•  Given  p  €  W  and  a  task  Z  we  call  Zp  G  .F(>V,  W)  defined  by  Zp{w)  =  Z{p^  w)  an  action. 

•  Let  Z  C  J^(yV  X  >V,  >V).  (We  think  of  it  to  be  finite).  A  project  is  a  pair  (W^Z), 

•  A  path  of  the  project  is  a  sequence  (ty„)^o  ^  ^  >  1  there  exists  a  Z  G  2 

and  j  <  i  such  that  Wi^i  =  Z{wj^Wi). 

•  Remark  We  may  say  also  that  for  any  path  in  a  project  there  exists  a  sequence  of  natural 
numbers  ji  and  a  sequence  of  tasks  Zi  such  that  Wi^i  =  Z,(u;j.,  tu,),  and  ji  <  i  for  i  >  0. 
The  sequence  j  =  ji  might  not  be  defined  in  an  unambiguous  manner.  E.g.  if  u;o  =  wi  and 
wz  =  Z{woj  W2)  then  j2  ^^^.y  be  either  0  or  1. 

•  Given  a  project  we  call  a  preguard  of  the  task  Z  £  Z  the  set 

=  {p  €  >V  :  ^weW  in)  /  tu}  C  W  . 

We  call  a  postguard  of  Z  the  set 

Qz  =  {q^yV  :  Z{w,  q)^  q}  CW  . 

•  Remark  The  notions  of  guards  may  be  introduced  in  a  more  general  way.  For  any  task  Z  £  Z 
sets  P  and  Q  called  pre-and  post  guards  such  that  Z(p^w)  =  w  for  each  p  G  W  \  P  and  each 
w  £}V  and  Z(^t;, q)  ^  q  for  each  q  £W\Q  and  each  w  £  W.  Clearly  the  above  defined  sets  Pz 
and  Qz  are  minimal  with  this  properties  as  aUways  Pz  C  P  and  Qz  C  Q-  For  some  technical 
reasons  it  may  be  sometimes  usefull  to  have  less  restrictive  definitions.  This  have  no  importance 
in  following  considerations  and  we  shall  not  discuss  this  any  further. 
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•  The  preguard  and  the  postguard  of  the  project  are  the  unions 

r  =  U  Pz  Q  =  U  Qz- 
zez  Z€Z 


2  Invariance 

Now  we  shall  now  define  inductively  some  subsets  of  W  and  Z. 

Definition  2.1  First  we  set  Wo  =  W.  Suppose  W„  is  defined  for  some  n  >  0  then  we  put 

'Pn  =  {P  €  W„  ;  3u,gVV„,Z62  7^ 

Qn  =  {qeWn  :  ^w€W„,Z&Z  Z{w,  q)  q} 

Zn  =  {Z  e  Z  :  3pg77„,,e<2„  Z{p,q)  ^  q} 

Wn+i  =  Zn{Vn,  Qn)  =  {weWn  :  3pg7>„,,eQ„.Ze2  =  ■^(P>  ?)} 

Lemma  2.1  We  have  Wn+i  C  Wn,  Pn+i  C  Vn>  Cn+i  C  Qn  ond  Zn+i  C  Zn- 

Proof : 

1.  Because  Zo  C  Z  C  J^(W  x  W,  W),  Vo  C  W  and  Qo  C  W  we  have  Wi  =  Zo{Vo,  Qo)  C 
Z(W,W)  C  W  =  Wo. 

2.  Suppose  that  W,4-i  C  W,-  for  i  <  n  with  n  >  0. 

3.  Let  pe  Vi+i  then  there  exists  w  €  Wi+i  C  W,-  such  that  Z(p,w)  /  w  for  some  Z  E  Z  therefore 
P  €  Vi. 

4.  Similarly  if  g  G  Qi^i  then  there  exists  a  Z  and  w  E  Wi+i  C  W,-  such  that  Z(w,q)  q  therefore 

q  €  Qi. 

5.  If  Z  6  Z,+i  then  there  are  p  E  Vi+i  C  Vi  and  q  E  Q.+i  C  Qi  such  that  Z(p,g)  ^  q  therefore 
Z  €  2.-. 

6.  Now  we  can  prove  that  Wn+i  C  W„.  We  have 

Wn+l  ~  Zji(Vnt  Qn)  C  Zn—l(Vn—li  Qn— l)  “  LVn  • 

These  sets  have  following  properties. 

•  Three  conditions  are  equivalent  ^  0  O'  Qn  7^  0  0 

Proof  :  Each  of  this  conditions  says  that  there  exist  Z  E  Z,  p  E  Wn  and  q  E  W„  such  that 

Zip,  q)  ^  q. 

•  For  any  A  C  Wn  \  Vn  and  any  B  C  Wn  we  have  ZniA,  B)  C  B. 

Proof ;  If  A  =  0  then  2„(A,  B)  =  0.  Otherwise  let  a  €  A  then  for  any  w  E  Wn  and  any  Z  E  Z 
we  have  Zia,w)  =  w.  Therefore  for  any  Z  E  Zn  '^0.  have  Z(a,  B)  =  B  and  ZniA^  B)  =  B. 
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•  For  any  B  C  Wn  \  Qn  and  any  A  C  Wn  we  have  Zn{A,  B)  C  B. 

Proof ;  If  J9  =  0  or  A  =  0  then  2n(  A,  B)  =  0.  Otherwise  let  6  €  i?  then  for  any  w  €  Wn  and  any 
Z  E  Z  v/e  have  Z{w^  b)  =  6.  Therefore  for  any  Z  G  we  have  Z{w^  B)  =  B  and  Zn(A,  B)  =  5. 

Theorem  2.1  For  any  n  the  pair  (Wn,  Zn)  is  a  project 

That  means  that  Zn  C  ^(Wn  X  Wn,  Wn)  or  in  other  words  that  2n(Wn,  Wn)  C  Wn- 
Proof :  We  have 

2n(Wn,Wn)  =  Zn{Wn\Vn,Wn)  U  Zn{Vn,Wn\  Qn)  ^ 

C  WnU(Wn\Qn)UWn+lCWn. 

□ 


Corrolary  2.1 

1,  For  any  n  the  pair  (Wn,Z)  is  a  project 

2.  We  have  the  following  invariance  Z(Wn,  Wn+i)  C  Wn+i* 

Proof : 

1.  Again  we  have  to  prove  2(Wn,  Wn)  C  Wn-  Consider  w  =  Z(p^q)y  for  €  Wn-  If  w  =  q  then 
w  G  Wn,  ifw^q  then  Z  G  2n,  P  and  q  G  Qn-  Hence  w  G  Wn+i  C  Wn- 

2.  Again  we  use  the  fact  that  if  for  p,  9  G  Wn  and  Z(p,  q)  ^  q  then  p  G  Vn,qe  Qn  and  Z  €  Zn  and 
Z{p,q)  G  Wn+i.  Let  Z  G  2,  p  G  W„  and  q  G  Wn+i  C  Wn.  If  n;  =  ^(p,9)  =  9  then  w  G  Wn+i- 
Otherwise  w  G  Zn(Vn,  Qn)  =  Wn+i- 


□ 

We  remind  that  for  a  path  (in,)  of  a  project  we  may  define  for  any  i  the  number  ji  <  i  is  such  that 
there  exists  Z  ^  Z  such  that  =  Z(wj-,Wi)).  This  sequence  is  thought  to  be  fixed  for  a  given  path, 
its  properties  are  however  valid  for  any  such  sequence. 

•  Define  i/(i)  =  max{n  :  Wi  G  Wn}  <  00,  where  00  is  assumed  of  Wi  G  Wn  for  aU  n.  We  have 

+  1)  >  min(i/(jV)  +  1,K0)  • 

Proof  :  Let  i/'  =  min(v(j{),i/(i)),  therefore  wj^^Wi  G  W^,/.  We  have  either  Wi^i  =  Wi  and  then 
u{i  -f  1)  z/(z)  or  Wj.  G  and  Wi  G  Q^f  and  Z  G  Z^/.  Therefore  Wi^i  =  Z{wj-^Wi)  G  W1//4.1, 

and  i/{i  +  1)  >  +  1-  Hence  if  i^{ji)  >  u{i)  then  u{i  +  1)  >  i^{i)  and  if  v{ji)  <  u{i)  then 

i/{i  +  1)  >  v{ji)  +  1. 

♦  Define  v{i)  =  min{z/(A:)  :  k  >  i}  max{n  :  ^rn>i'^m  €  Wn}-  Then  v{i)  is  not  decreasing. 

Proof :  We  have  i>(i)  =  +  1),  1^(1))  <  i^{i  +  1). 

Theorem  2.2  If  a  path  of  a  project  satisfies  j(i)  00  for  z  00  for  some  sequence  ji  then  either 
Wm  —  WM  for  some  M  and  all  m  >  M  or  for  each  n  there  exists  an  M  such  that  Wm  6  Wn  for  all 
m  >  M . 
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Proof :  It  goes  through  following  steps. 

1.  If  the  path  is  not  eventually  constant  then  the  number  of  changes  in  the  path  m{i)  =  card  {0  < 
k  <  i  :  Wk-\-i  ^  tUjt}  increases  with  i  to  oo. 

2.  In  this  case  we  shall  prove  inductively  that  for  any  n  <  oo  there  exists  an  such  that  i/(Mn)  > 
n. 

3.  For  n  =  0  we  have  Mq  =  0  as  u;,’  G  W  =  Wq  for  all  i, 

4.  Let  now  n  >  0  and  suppose  that  we  found  M  =  Mn-  We  have  by  definition  of  Mn  that  Wm  €  >Vn 
for  all  m  >  M. 

5.  Let  A;  >  M  be  minimal  such  that  ji  >  M  for  all  i  >  k.  This  is  possible  as  ji  oo.  Let  N  >  k 

be  minimal  with  ^  wjq-  Such  N  exists  as  the  sequence  is  not  eventually  constant. 

6.  We  prove  inductively  that  Wm  €  Wn+i  for  m  >  iV. 

•  For  m  =  iV  we  have  by  definition  of  N  that  €  Qn>  ^  ^7V+i  €  Zn{Vn,  Qn)  == 

Wn+l. 

•  Inductively  for  m  >  iV  we  have  Wm  G  Wn+i  and  wj^  G  Wn  and  tWm+i  €  2(V\^n>  VVn+i)  C 
Wn+l. 

•  We  have  therefore  i>(N  +  1)  >  n  +  1. 

7.  We  set  M{n  +  1)  :=  iV  +  1,  because  of  the  last  remark  the  proof  is  done. 

□ 

Corrolary  2.2  If  for  some  w  and  for  all  Z  £  Z  we  have  Z{w^  w)  ^  w  and  ji  oo  then  there  is  no 
eventually  constant  sequences  terminating  by  Wi  =  w  for  large  i. 

Proof :  Clearly  for  i  large  enough  lyi+i  =  Z{wj^^Wi)  ==  Z{w^  w)^  w.  □ 

3  Agencies  and  Managements 

In  this  section  we  introduce  a  specific  model  which  realizes  the  sequences  from  leist  section.  First  we 
say  what  are  the  actions  which  can  change  the  world. 

•  A  project  (>V,2)  defines  the  set  of  available  actions  V  C  T{W^W)  given  by 

v  =  {<f>e  JF(>V, W)  :  3zez.pePz^^ewcl>M  =  Z^(w)  =  Z{p,w)}  . 

•  An  action  Zp  is  called  idle,  denoted  by  Zp  =  id,  if  Z{py^)  =  w  for  any  w  G  W.  A  task  Z  is  called 
idle  if  Zp  =  id  for  any  p  G  kV  (for  a  generalized  notion  of  a  preguard  we  demand  only  Zp  =  id 
for  p  in  the  preguard  of  Z), 

•  We  say  that  the  project  is  complete  if  either  V  =  [J^  P^  ~  W  or  there  is  an  idle  task  in  Z. 

•  If  a  project  is  not  complete  we  complete  it  by  adding  an  idle  task  to  2. 
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Now  we  are  ready  to  describe  tha  way  the  world  is  changed. 

Definition  3.1  Given  a  (finite)  set  A  (called  the  agency  or  the  set  of  agents)  we  define  a  mana¬ 
gement  of  a  (completed)  project  V  =  (W,2)  to  be  a  set  of  functions  M  =  !F{A^V)  valued  in  the  set 
of  available  functions  V. 

Each  elements  of  this  set  may  be  thought  of  as  a  decision  how  to  distribute  among  the  agents  A  E  A 
available  actions  from  V.  The  terms  larger  or  smaller  agency  will  refer  to  the  cardinality  of  the  set  A. 

An  enterprise  S  of  an  agency  A  realizing  (or  managing)  a  (completed)  project  P  is  a  (maximal) 
subset  of  £  C  (W  X  At )'^  of  sequences  which  fulfills  the  condition  stated  below.  First  we  explain  the 
structure  of  an  enterprise. 

If  e  E  then  e  =  {^j For  any  j  £  Af  we  have  aj  E  At,  therefore  for  any  A  E  A  the  function 
Oj{A)  E  V  is  an  available  map  of  the  form  Zp  for  some  iEl^ZEZiCV  and  p  E  Pi-  Hence  an  agent  may  act 
on  the  world  W  — ►  W  by  u;  Zp{w)  =  Z(p,  w),  which  we  may  write  w  aj(yl)(u;). 

The  condition  reads  :  For  any  j  there  exists  an  A  E  A  such  that 

•  Wj^i  =  aj{A){wj)  and 

•  aj^i{A)  =  for  some  Z  E  V.  (It  means  implicitly  that  wj^i  fulfills  the  preguard  of  Z  E 

Z  CV-i  this  is  always  possible  for  some  Z,  as  the  project  was  completed). 

•  Moreover  if  aj+i(A)  ^  (^j{A)  then  ajj^\{A)  —  Z^j^^  for  some  Z,  i.e.  new  available  actions 
assigned  to  the  agents  at  this  moment  must  be  anchored  at 

We  say  that  an  enterprise  is  quiet  if  the  distribution  of  non-idle  activities  of  agents  does  not 
differ  to  much  from  the  distribution  aj.  By  this  we  mean  that  if  wj^i  =  otj{Ao)(wj)  and  A  /  Aq  then 
if  otj^A)  ^  id  then  aj^i{A)  =  ctj(A). 

A  short  way  to  say  it  is  that  at  the  moment  j  the  change  in  the  distribution  of  available  actions  may  occur 
only  at  idle  actions  and  the  action  which  just  took  place.  The  management  takes  as  little  decision  as  possible, 
summoning  only  agents  which  are  not  active  and  the  agent  which  just  finished  its  job. 

We  say  that  the  enterprise  is  active  if  for  any  agent  with  an  idle  activity  otj{A)  =  id  we  have 
aj^.i(A)  is  not  idle  if  possible.  By  this  we  mean  that  if  Wj^i  belongs  to  a  preguard  Pt,  whose  task  is 
not  idle  then  aj^.i(A)  ^  id  for  A  E  A. 

The  projection  of  an  enterprise  on  is  called  a  development  V 

for  some  sequence  of  aj.  An  element  of  a  development  (i.e.  a  sequence  (wj))  is  called  a  path. 

•  Given  the  world  W  we  say  that  the  enterprise  £  is  wider  than  £^  if  P'  C  D. 

•  We  say  that  an  enterprise  £  is  developing  quicker  than  £^  if  for  any  sequence  (tu')  E  V'  and 
/  >  0  there  exists  a  sequence  (w)  E  V  and  j  <  /  such  that  for  any  /  >  0  we  have 

That  means  that  any  subsequence  from  P'  appears  sooner  in  V, 

•  We  use  the  word  eventually  in  front  of  wider  or  quicker  if  there  exists  an  N  such  that  these 
relations  are  restricted  for  the  all  sequences  after  rejecting  first  N  elements. 

In  order  to  compare  two  developments  we  have  to  consider  the  following  equivalence  relation 
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Definition  3.2  We  say  that  a  sequence  is  simple  if  the  equality  wj  =  tUj+i  for  some  j  implies 
Wi  =  Wj  for  all  i  >  j. 

A  simplification  of  a  sequence  is  its  maximal  simple  subsequence. 

We  may  think  of  it  as  of  a  map  s  :  such  5(1^^)  =  with  Aro  =  0  and  if  kj  is  defined  then 

either  kj^i  =  i  is  minimal  i  >  kj  such  that  Wi  ^  Wkj  or  if  Wi  =  Wj  for  all  i  >  j  then  kj^i  =  kj  +  1. 

We  say  that  two  sequences  are  simply  the  same  if  they  have  same  simplifications 

Example  3.1  Consider  the  world  W  =  {0,1}^  for  some  N  £  M-  Let  V  =  where  for  i  = 

1, . . . ,  IV  we  have  Pi  {w  £  W  :  Wi  ^  0},  Qi  =  {w  £W  :  Wj  =  IJ  <  i}  and  Zi{p,  w)j  -  I  for  j  <i 
and  Zi{p^  w)j  =  0  for  j  >  i.  For  i  =  0  we  set  Pq  =  {(1, . . . ,  1)},  Qo  =  ond  Zo{p<,  w)  =  (0, . . .  ,0).  For 
i  =  IV  +  1  we  set  the  preguard  =  W  \  ^)f  postguard  Q  —  W  and  Z{p^  w)  =  (0, . .  .,0). 

We  complete  the  project  in  a  standard  way. 

This  project  is  ending  in  idle  actions  if  the  agency  has  cardinality  smaller  than  N. 

Example  3.2  Let  W  =  {0, 1,2,3}.  For  i  “  1,2  let  Zi  =  {Z,}  with  Zi{p^w)  =  0  for  w  —  0,i, 
Z,(p,3)  =  i  and  Z,(p,3  —  i)  =  i.  If  Qi  =  {0}  then  the  task  Zi  is  idle.  If  0  ^  Qi  ^  ^  then  the  task 
is  tight.  If  the  project  consists  only  of  one  of  these  tasks  then  it  lands  at  0  after  at  most  three  steps. 
If  the  project  includes  both  of  them  then  eventually  periodic  sequences  as  312121212 . . .  appear  in  the 
development. 

Theorem  3.1  Two  agencies  of  the  same  cardinality  realizing  same  project  have  the  same  development. 

Proof :  We  have  to  show  that  any  sequence  (wj)  from  the  development  V  realized  by  the  management 
M  of  the  agency  .4  belongs  to  the  development  realized  by  the  management  M'  of  the  agency  A^. 
If  (wj)  £  V  then  there  exist  aj  and  Aj,  j  =  0,1,...,  such  that  the  sequence  (u;j,aj,Aj)  £  M.  In 
view  of  equal  cardinalities  there  exists  a  bijection  a  :  A  ^  A'.  We  define  a  sequence  A'  )  by 

A'.  =  a{Aj)  and  aj(A')  =  ^^(^“^(A')).  This  sequence  lies  in  Ad'.  □ 

In  fact  we  proved  more  :  there  is  a  bijection  between  two  managements  of  two  agencies  of  the  same 
cardinality.  We  proved  it  by  showing  a  conjugacy.  The  same  art  of  proof  is  valid  for  card  A  <  card  A' 
if  there  is  no  special  conditions  on  the  management. 

Theorem  3.2  Larger  agencies  have  larger  managements  (and  larger  developments). 

Proof :  Let  A"  C  A'  and  card  A"  =  card  A.  If  (wj^aj^Aj)  £  M  then  {wj.,aj  o  cr”^,<T(Aj))  £  Ad"  and 
we  may  extend  the  definition  of  a'  =  a  o  (j~^  on  the  set  A'  \  A"  by  setting  constant  tasks.  Clearly 
{wj,  a',  <t( Aj))  £  Ad'.  □ 

However  if  we  want  to  have  some  additional  conditions  on  the  management  we  have  to  be  more  carefuU. 

Example  3.3  Assume  that  any  initiated  action  terminates  and  let  us  consider  the  world  W  =  {0..iV— 
1}  and  the  task  Z{w)  =  tu  +  l(modiV)  with  Po  =  {0}.  If  card  A  =  M  then  for  M  <  N  all  the  paths 
starting  from  0  land  in  M  and  stay  there  (wj  ~  M  for  j  large  enough).  For  M  >  N  all  of  them  are 
cyclic. 

Theorem  3.3  In  an  agentural  project  (a  project  managed  by  an  agency)  when  all  the  actions  termi¬ 
nate  for  any  sequence  (^Wi)  we  can  pick  the  sequence  ji  00. 

Proof :  The  chosen  sequence  is  defined  by  the  sequence  of  active  actions.  As  each  action  terminates 
the  function  ji  :  AT  A/"  is  at  most  card  A-to-1.  □ 
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4  Subshifts  of  finite  type 


If  we  suppose  that  the  world  W  is  finite  and  the  project  V  is  finite  then  we  may  use  the  modeling  via 
the  theory  of  subshifts  of  finite  type.  In  this  section  we  give  an  outline  of  this  theory. 

Let  /C  be  a  finite  set  and  X  =  /C^  be  the  set  of  (one-sided)  sequences  valued  in  K,  The  dynamical 
system  {X^a)  is  called  a  fuU  shift,  where  the  shift  a  acts  on  the  sequence  (on)  by  skipping  its  first 
element,  «T((an)^o)  =  (^n)^o  with  a',,  = 

Now  let  T  =  {tm,n)  he  akxk  matrix,  k  =  card  /C,  and  tm,n  €  {0, 1}.  We  define  a  subspace  Xj  C  X 
by  the  condition  (an)  ^  Xt  iff  for  any  n  tan,a„+i  =  1-  We  can  describe  the  sequences  from  Xt  as  the 
sequences  for  which  the  possible  successors  a'  =  Un+i  G  /C  (in  the  sequence)  of  the  element  a  =  an  G  /C 
are  described  by  the  permission  matrix  T.  The  matrix  is  called  irreducible  if  there  is  some  m  such 
that  has  all  entries  strictly  positive.  It  means  that  after  m  steps  we  may  go  from  any  state  to  any 
state.  The  entries  of  T”*,  which  are  obviously  natural  numbers,  represent  the  number  of  paths  joining 
two  states  in  m  steps. 


Example  4.1  Let  K  =  {1,2}  and 


then  X  is  the  set  of  all  sequences  of  1  and  2  and  Xt  are  the  sequences  with  no  two  consecutive  2^s, 
If  K  =  {1,2,3}  and 
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then  Xt  is  the  set  of  all  sequences  of  1,2  and  8  where  3  must  be  followed  by  2  and  preceded  (if  not 
staying  at  the  beginning  of  the  sequence)  by  L 


The  dynamical  system  (Ax,  o')  is  called  the  subshift  of  finite  type.  For  more  information  see  [1].  In 
this  system  the  following  notions  are  naturally  defined. 


•  The  metric.  Let  d  be  the  discrete  metric  on  the  set  /C.  Then  we  can  define  the  metric  d  on  X 
(and  on  Xt  as  well)  by  d((a,i),(6„))  =  ^  d{an^bn)/2'^.  The  balls  consist  of  sequences  with  same 
values  of  in  given  finite  number  of  initial  coordinates.  Two  sequences  are  close  if  their  sufficiently 
long  initial  parts  are  identical. 

•  The  topology  is  the  metric  topology  in  the  above  sense.  The  base  of  neighbourhoods  are  the 
so  called  cylinders,  i.e.  the  sets  with  fixed  values  on  some  finite  coordinates.  The  cylinders  are 
the  unions  of  finite  number  of  balls. 

•  The  measure.  Let  {pi)i-i  be  a  probability  distribution  on  the  set  1C.  We  may  define  the 
probability  of  the  cylinder  by  the  product  of  p^’s  corresponding  to  the  fixed  values  defining 
the  cylinder.  This  definition  expands  {via  Kolmogorov’s  theorem)  to  the  measure  on  Borel  sets 
in  X.  The  measure  on  Xt  may  be  (with  some  care)  derived  by  taking  the  conditional  measure. 


We  want  to  describe  the  evolution  of  a  system  with  acting  agents  as  a  sequence  of  states.  One  sequence 
represents  one  possible  development  of  a  system.  The  state  is  a  configuration  of  the  system  including 
the  real  world  and  the  agents  with  their  private  worlds,  flags  of  actual  activities  and  preguard  and 
postguard  information. 
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The  idea  borrowed  from  the  subshifts  of  finite  time  is  to  reduce  the  space  of  all  sequences  of 
configurations  (states)  to  the  sequences  for  which  only  some  successors  of  a  state  are  possible.  This 
corresponds  on  one  hand  to  the  conditions  making  actions  acceptable  and  on  the  other  to  the  permission 
matrix.  We  shall  be  more  specific  in  the  next  section. 

Let  us  now  consider  in  detail  an  easy  example.  The  goal  of  this  example  is  to  present  a  system  small 
enough  to  make  the  full  description  readable  but  which  has  the  features  leading  to  more  complicated 
applications  as  a  system  with  a  flip-flop  and  a  counter  controlled  by  several  agents. 

Example  4.2  (An  agent  copies  the  flip-flop  into  a  register)  Consider  the  system  S  with  a  flip- 
flop  X  and  a  register  r.  The  flip-flop  changes  the  value  from  0  to  1  and  from  1  to  0  independently  from 
the  rest  of  the  system.  The  aim  of  the  acting  agent  A  is  to  put  in  r  the  value  of  x  in  case  when 
the  actual  state  of  the  flip-flop  is  different  from  the  one  remembered  by  the  agent.  The  agent  has  two 
registers  :  a  working  one  w  and  an  activity  one  a.  □ 

Let  1C  be  the  set  of  following  vectors  (5,  A)  =  ((x,  r),  (u;,  a))  with  x,  r,  ty,  a  €  {0, 1}.  The  cardinality  of 
/C  is  2"^  =  16.  A  0-1  matrix  T  =  (tv,v')  describes  the  admissible  followers  F'  G  /C  of  a  state  V  in  the 
sequence  of  the  evolution  of  the  system  (5,  A). 

Instead  of  writing  the  16  X  16  matrix  T  we  shall  describe  the  permissions,  the  entry  of  the  matrix 
is  1  iff  the  following  conditions  are  fulfilled  : 

1.  ((a;,r),A)  can  follow  and  be  followed  by  ((x',  r),i4)  for  any  choice  of  x,  x'  and  r,  A,  i.e. 
^((a:,r),>l),((x',r),>l)  =  1-  This  is  the  independence  of  the  flip-flop. 

2.  The  value  of  w  is  changed  into  the  value  of  x  when  some  condition  G{S)  {a  preguard  from  [3])  is 
fulfilled,  then  also  a  changes  from  0  to  1  (the  agent  becomes  active).  In  other  words  under  G{S) 
for  V  =  ((x,r),(w,0))  and  V'  =  ((x',  r),(x,l))  we  have  tyyf  =  1,  for  any  x,  x',  w  and  r.  In  our 
case  G  is  fulfilled  by  any  state  S  (there  is  no  preguard  condition). 

3.  When  G{S)  is  fulfilled  and  a  =  0  then  the  only  possible  follower  of  V  is  F'  with  a*  =  \  and 

w*  =  X. 

4.  a  may  change  from  1  to  0  only  if  w  changes  to  w^  =  f{w)  and  y  changes  to  F(5,  A).  /  is  a 
predefined  function  depended  of  the  aim  of  the  agent,  in  our  case  f{w)  =  tu,  and  F(5,  A)  =  r  or 
f{w)  depending  if  some  condition  (a  postguard  from  [3])  is  fulfilled.  In  our  case  F(S^A)  =  /(tu) 
if  f{w)  =  w  ^  X  and  y  when  f{w)  =  w  =  x.  That  means  that  tyyt  =  1  for 

(a)  V  =  ((0,r),(l,l))  and  V  =  ((a:',  1),(1,0))  or 

(b)  V  =  ((0,r),(0,l))  and  V'  =  ((x',  r),(l,0))  or 

(c)  F  =  ((1,  r),  (1, 1))  and  V  =  ((x',  r),  (1, 0))  or 

(d)  V  =  ((l,r),(0,l))  and  V  =  ((x',0),(0,0)) 

5.  We  do  not  permit  the  register  r  to  change  in  a  different  way  than  by  converting  it  into  the  value 
of  w  as  described  above  at  (4). 

6.  We  do  no  say  what  happens  to  w  when  a  stays  equal  to  0  (this  situation  is  in  our  case  excluded 

by  (2,3)),  but  when  a,a'  =  1  ty  cannot  change.  When  a  =  1  and  a'  =  0  there  is  no  condition  on 

w. 
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Table  1:  The  permission  matrix  for  a  system  copying  a  flip-flop.  Explanation  in  the  text. 

Here  is  the  whole  permission  matrix  T.  We  represent  the  state  by  the  hex-digit  equal  to  a;  +  2r  + 
4w  +  8a.  The  double  lines  separates  different  activities  (a  =  0  and  a  =  1)  and  single  lines  different  w. 
We  mark  only  the  entries  equal  to  1.  Repeated  double  ones  say  that  the  flip-flop  may  change  its  state 
in  an  independent  way. 

The  first  quadrant  (a  =  0,a'  =  0  of  the  matrix  is  empty  because  in  our  example  the  system 
must  change  from  idle  to  active  (condition  3)  in  particular  because  there  is  no  restriction  given  by 
a  preguard^  G{S)  is  always  fulfilled.  The  second  quadrant  (a  =  0,a'  =  1)  shows  the  copying  of  x 
into  to'  while  leaving  r.  The  third  one  (a  =  l,a'  =  0)  shows  what  happens  when  the  agent  terminated 
its  job.  There  are  two  pairs  of  entries  in  each  row  due  to  the  fact  that  the  new  value  of  tn'  is  not 
determined.  The  register  r  changes  only  in  rows  B  and  D.  The  fourth  quadrant  shows  that  (up  to  the 
flip-flop  changes)  the  system  stays  identical  when  the  agent  is  busy. 

Let  us  take  now  the  set  X  of  all  (one-sided)  sequences  of  symbols  0 . . .  F,  and  Xt  the  subshift 
derived  from  X  with  the  matrix  T.  The  sequences  from  Xt  represent  all  possible  evolutions  of  the 
system  which  fulfill  the  rules  of  permission.  We  can  now  compare  two  evolutions,  try  to  find  an 
invariant  measure  then  attractors  (in  both  topological  and  metrical  sense). 

5  The  thermodynamics 

There  is  already  a  very  well  developed  theory  of  subshift  of  finite  type.  In  this  section  we  point  out 
how  the  notions  of  thermodynamics  may  be  used  in  the  investigations  of  dynamical  systems  consisting 
of  sets  of  sequences  as  the  phase  space  and  a  shift  as  the  transformation.  This  is  based  on  the  books 
[1,  2].  ^  ^ 

Probability  measures,  introductory  notions.  Let  (X,F,/i)  be  a  probability  space^  i.e.  F  is  a 
<7- field  of  subsets  of  X  (called  measurable  sets)  and  //  is  a  nonnegative  measure  on  B  with  p(X)  =  1. 
Usually  we  work  with  a  fixed  transformation  of  the  space.  We  want  this  transformation  to  preserve 
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the  measure  (or  the  measure  to  be  invariant  with  respect  to  the  transformation). 

An  automorphism  is  a  measurable  bijection  T  :  X  X  (i.e.  £  B  E  £  B)  for  which 

fji{T~^E)  =  fi{E)^  E  £  B.  An  endomorphism  of  a  probability  space  is  a  measurable  transformation 
such  that  fi{T^^E)  =  E  £  B. 

In  case  when  X  is  a  compact  space  and  T  is  a  homeomorphism  (or  a  continuous  map)  one  usually 
sets  B  to  be  the  family  of  Borel  sets.  The  measure  is  called  then  a  Borel  pfbl)ability  measure.  Let 
M{X)  be  the  set  of  Borel  probability  measures  and  Mt{X)  its  subset  of  measures  which  are  invariant 
with  respect  to  T.  We  have  by  definition  p  £  Mt{X)  iff  =  //.  For  any  //  .£  M{X)  we  can. define 

T\p.)  =  ^ioT-\ 

Real- valued  continuous  functions  C(X)  on  the  compact  metric  space  X  form  a  Banach  space  with 
the  norm  ||/|j  =  sup^^;^  \f{^)\-  The  weak  ♦-topology  on  the  space  C{X)*  (i.e.  the  space  of  continuous 
linear  functionals  a  :  C{X)  TZ)  is  generated  by  the  sets  of  the  form  i7(/,  c,ao)  =  {a  £  C{X)*  : 
\a{f)  ^  ao(/)l  <  6}  with  /  G  C(X),  c  >  0,  ao  G  C{Xy. 

Riesz  Representation.  For  each  p  £  M{X)  define  by  amu(/)  =  /  f  dp.  Then  p  is  a 

bijection  between  M{X)  and  {a  G  C{X)*  :  a(l)  =  1  and  a(f)  >  0 :  /  >  0}.  We  identify  and  p.  We 
call  the  weak  topology  on  M(X)  the  topology  induced  by  this  identification  from  the  weak  ^-topology 
on  C{X)\ 

We  have  following  properties  of  the  spaces  M(X)  and  Mt{X), 

•  M(X)  is  a  compact f  convex^  metrizable  space. 

This  follows  from  the  fact  that  the  weak  topology  on  M(X)  is  equivalent  with  the  topology 
induced  by  the  metric  d{pji/)  =  \Jfndp  —  J  fndu\  •  l|/n||‘~^/2”?  where  (/„)  is  a  dense 

subset  of  C(X). 

•  Mx{X)  is  a  nonempty  closed  set  of  M(X). 

T*  is  a  homeomorphism  of  M{X)  and  Mt{X)  =  {p  £  M(X)  :  T*{p)  =  p}.  For  p  £  M{X)  let 
1/  be  an  accumulation  point  from  -  YlkZo{T*y p-  Then  i/  is  T  invariant. 

•  P£Mt{X)  iff  J{f  oT)dp  =  J  f  dp  for  all  f  £  C{X). 

This  is  Riesz  representation  theorem  applied  to  T*p  =  p. 

Suppose  that  A  =  is  a  n  x  n  matrix  of  nonnegative  integers.  We  may  consider  a  (closed) 
subset  Svi  (resp.  S]^)  of  S  (resp.  S"^)  consisting  of  the  sequences  x  such  that  >  0  for  any  k. 

We  may  assume  that  A  is  such  that  for  any  k  £  F  there  is  an  x  G  with  xq  =  k^  otherwise  one 

can  take  an  m  x  m  matrix  B  with  m  <  n  and  These  sets  with  a  shift  transformations 

are  subshifts  of  finite  type. 

Let  us  state  the  following  result.  The  shift  r  is  topologically  mixing  (i.e.  for  any  V  nonempty 
open  subsets  of  there  is  an  N  such  that  r^U  HV  7^  0  for  M  >  N)  iff  A^  >  0  (i.e.  aU  entries  are 
strictly  positive)  for  some  M. 

In  the  set  C(S^^)  there  is  a  special  of  continuous  real- valued  functions  on  where  is  a  special 
family  Fa  of  functions  with  positive  Holder  exponent  with  respect  to  the  metric  dj.  (f)  £  iff 
var^(<^)  sup{|<^(x)  —  <^(y)|  :  Xi  =  yi :  |i|  <  k]  <  for  some  6  >  0  and  a  £  (0, 1). 

Gibbs  measures  Suppose  that  a  ’physical  system’  has  possible  states  1, , . . ,  n  and  the  energies 
of  these  states  are  Ei^...^En-  Suppose  further  that  this  system  is  not  isolated  but  in  permanent 
contact  with  a  ’large  heat  source’  which  remains  at  the  constant  temperature  T.  Therefore  the  total 
energy  of  the  system  is  not  fixed  and  any  state  of  the  system  may  actually  occur.  There  is  a  following 
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’physical’  fact.  The  probability  pj  that  the  system  is  at  state  j  is  given  by  Gibbs  distribution  pj  = 
exp(— /3JSj)/  5^,- exp(— /?£,*),  with  /?  =  l/^T,  k  a  ’physical’  constant. 

This  is  connected  to  the  following  ’mathematical’  fact.  Given  real  numbers  ai, . . . ,  Un  the  function 
F{P1j  •  •  •  ?Pn)  =  “  ^ogpi)pi  attains  in  the  simplex  YliPi  =  1>  Pi  >  0  ^  maximum  log  exp(ai) 

at  the  point  pj  =  exp(aj)/  exp(a,).  The  quantity  /i(pi, . . .  ,Pn)  =  '^Pi legp,*  is  called  the  entropy 
of  the  distribution  (p,).  We  assume  OlogO  =  0  for  xlogx  to  be  continuous  at  a;  =  0. 

If  we  put  ai  =  —PEi  then  we  have  ^  aiPi  —  —PE  with  average  energy  E  and  the  Gibbs  distribution 
maximizes  S  —  PE^  where  S  stays  for  entropy.  The  minimized  quantity  P  ^  E  —  kTS  \s  called  free 
energy.  Therefore  the  principle  reads  ’nature  maximizes  the  entropy’  when  the  energy  is  fixed  but 
’nature  minimizes  the  free  energy’  when  the  energy  is  not  fixed.  One  can  generalize  such  a  distribution 
to  the  system 

Let  ^  :  Syi  71  be  Holder  continuous.  Then  there  is  a  unique  invariant  measure  p  €  Mr(S>i)  for 
which  one  can  find  constants  ci,  C2  and  P  such  that  ci  <  p{y  :  yj  =  xj^j  =  0, . . . , m  —  l}/ea;p(— Pm  + 
<!>  o  W(x))  <  C2.  One  can  call  P  =  P{<f>)  a  pressure  of  (j).  The  exact  definition  of  the  pressure  is 
more  complicated. 

For  such  generalized  ’Gibbs  distribution’  p  one  has  the  Variational  Principle.  h{p)+ J  <l>  dp  P{^)- 

The  mecLSure  satisfying  the  above  principle  is  called  an  equilibrium  state.  In  one-dimensional  lattice 
the  equilibrium  states  for  Holder  continuous  functions  are  (unique)  Gibbs  distributions. 

We  can  call  (f>  G  C(X)  observables,  and  p  G  M{X)  states  in  the  sense  that  =  J  (j>  dp  is  the 
average  value  of  <f>  in  the  space. 

The  configurations  (i.e.  the  sequences  x  G  'Ea)  can  describe  possible  evolutions  of  the  system.  The 
matrix  A  describes  pre-  and  post-guards.  If  we  are  interested  in  asymptotical  behaviour  of  the  limit 
sets  we  may  define  an  observable  <f>  and  see  what  is  a  state  p  which  realizes  the  variational  principle. 
This  measure  p  shows  what  configurations  are  ’important’  from  the  point  of  view  of  the  observable  (j). 

Now  there  is  a  couple  of  notions  which  needs  to  be  interpreted  in  the  setting  of  the  behavioral 
specifications.  We  may  want  to  know  what  are  energy^  pressure^  temperature  ?  We  may  want  to  look 
for  a  ’good’  potential  energy,  so  that  we  see  ’interesting’  sequences  with  large  probabilities.  We  may 
want  to  understand  what  are  equilibrium  states  p  and  observables  <f>  ?  Are  we  interested  at  all  in  the 
infinite  setting  ?  Should  we  rather  concentrate  in  the  finite  (but  large)  systems  ? 

The  easiest  case  is  when  one  considers  as  <^(x)  =  — d^(x,  5),  the  distance  of  the  configuration  to  a 
given  set  5  C  In  the  case  of  an  algorithm  —  by  this  I  mean  that  we  are  interested  in  an  evolution  of 
finite  number  of  steps,  i.e.  finite  iterations  of  the  shift  —  this  set  S  should  be  (forward)  shift  invariant 
or  even  a  fixed  point  of  the  shift.  The  function  <f)  cannot  be  split  into  two  parts,  describing  the  energy 
of  the  site  0  (due  to  x©)  and  the  potential  energy  of  interactions  between  the  site  0  and  sites  j  for 
j  G  M.  Nevertheless  it  describes  in  a  sense  how  ’far’  the  actual  configuration  is  from  the  desired  form. 
Natural  candidate  equilibrium  measures  (states)  should  have  supports  on  S  (the  integral  part  is  then 
0)  and  spread  equally  on  5*  to  maximize  the  entropy.  If  the  set  S  is  not  forward  invariant  then  the 
(invariant)  measure  cannot  be  supported  only  on  S. 

On  the  other  hand  the  ’potential  energy’  may  also  describe  the  preferences  of  the  observer,  e.g.  a 
weighted  distance  to  some  disjoint  sets  of  acceptable  ’final’  configurations. 

Acknowledgements.  The  research  reported  here  was  supported  in  parts  by  the  polish  KBN  grant 
No  2  1090  9101  and  USAF  Special  Contract  F61708-94-C0001. 


January^  1995 


15 


TR  95-01(201) 


Institute  of  Informatics 


Warsaw  University 


References 

[1]  R.  Bowen.  Equilibrium  States  and  Ergodic  Theory  of  Anosov  diffeomorphisms.  Number  470  in 
Lecture  Notes  in  Mathematics.  Springer  Verlag,  1975. 

[2]  D.  Ruelle.  Thermodynamical  formalism,  volume  5  of  Encyclopedia  of  Mathematics  and  its  Appli¬ 
cations.  Addison-Wesley  Pub.  Co.,  1978. 

[3]  W.  M.  Turski.  Behavioural  specifications.  Technical  Report  TR-02(202),  Institute  of  Informatics, 
Warsaw  University,  January  1995. 


TR  95-01(201) 


16 


January,  1995 


